Privacy Policy

General information

The following notes provide a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to the privacy policy set out below.

Controller

Christian Schwan
Am Sportplatz 24
79112 Freiburg im Breisgau
christian@schwan.io

Hosting

This website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. When the site is accessed, technically necessary data (e.g. IP address, timestamp, page accessed, browser type) is processed in server log files to ensure secure, stable operation. The legal basis is Art. 6(1)(f) GDPR. A data processing agreement pursuant to Art. 28 GDPR is in place with Vercel. Vercel is certified under the EU-US Data Privacy Framework, so any transfer to the USA is based on the European Commission's adequacy decision (Art. 45 GDPR).

Cookies

This website sets a single, strictly necessary cookie (name: “locale”, lifetime: 12 months) that stores only your chosen language. Because it is essential for a service you explicitly request (language selection), no consent is required (§ 25(2) TDDDG); the subsequent processing relies on Art. 6(1)(f) GDPR. No analytics, tracking, or marketing cookies are used.

AI assistant & contact

The AI assistant on this site is also how you get in touch with me — there is no classic contact form. Your input is processed to generate a response. If you ask to get in touch, the details you provide in the chat (name, email address, and message) are collected in order to send your request to me by email. Please do not enter any sensitive personal data.

To answer, your input is transmitted via the Vercel AI Gateway (Vercel Inc., USA) to, and processed by, the following providers: OpenAI, L.L.C. (USA) rewrites your question into a search query and generates vector embeddings; Anthropic PBC (USA) generates the actual response. The embedding is matched against a knowledge database hosted on Amazon Aurora (AWS) in the EU (Frankfurt). The legal basis is Art. 6(1)(f) GDPR. Vercel and OpenAI are certified under the EU-US Data Privacy Framework (transfer based on Art. 45 GDPR); the transfer to Anthropic is based on the EU Standard Contractual Clauses (Art. 46 GDPR).

Contact messages are sent by email via Amazon SES, a service of Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg; processing takes place on servers in the EU. A data processing agreement pursuant to Art. 28 GDPR is in place with AWS. The legal basis for handling your contact request is Art. 6(1)(b) or (f) GDPR. The data is deleted as soon as it is no longer required for the purpose.

Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), and data portability (Art. 20). You may also lodge a complaint with a data protection supervisory authority (Art. 77 GDPR); the authority responsible for me is the State Commissioner for Data Protection and Freedom of Information of Baden-Württemberg. To exercise your rights, an informal message to the contact details above is sufficient.

Right to object

Where I process your data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time, on grounds relating to your particular situation, to that processing (Art. 21 GDPR). If you object, I will no longer process the data concerned unless I can demonstrate compelling legitimate grounds that override your interests.

Last updated: 23 July 2026